CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (Oct 29, 2026, 1:30 AM ET)

What this means for you

This week: 3,088 CVEs published, 233 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 3,088; Show in the list
Critical, last 7 days: 233; Show in the list
Healthcare-tagged, last 7 days: 9; Show in the list
Known exploited (CISA KEV): 1,762; Show in the list

Showing CVEs that name the product redhat:debezium. Show all products

54 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2025-70974	Critical 10.0	Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a Java class, there may be calls to certain public methods of tha… Assigned by mitre	Jan 9, 2026
CVE-2026-27727	High 8.9	mchange-commons-java: Remote Code Execution via JNDI Reference Resolution Assigned by GitHub_M	Feb 25, 2026
CVE-2026-27830	High 8.9	c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property Assigned by GitHub_M	Feb 25, 2026
CVE-2026-1605	High 7.5	In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP request, with Content-Encoding: gzip, is processed and the corresponding… Assigned by eclipse	Mar 5, 2026
CVE-2026-24281	Medium 5.9	Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager Assigned by apache	Mar 7, 2026
CVE-2026-24308	Medium 6.5	Apache ZooKeeper: Sensitive information disclosure in client configuration handling Assigned by apache	Mar 7, 2026
CVE-2025-67030	High 8.8	Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. Assigned by mitre	Mar 24, 2026
CVE-2026-33870	High 7.5	Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing Assigned by GitHub_M	Mar 27, 2026
CVE-2026-33871	High 8.7	Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass Assigned by GitHub_M	Mar 27, 2026
CVE-2026-2332	High 7.4	HTTP Request Smuggling via Chunked Extension Quoted-String Parsing Assigned by eclipse	Apr 14, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.